Information Security Specialist in Smart-Holding

The IT Capital company, which is part of the Smart Holding investment group, invites to its team: Information Security Specialist Duties: Carrying out regular security scans of the external and internal perimeter of the Holding's network. Manual processing of scan results, verification of detected vulnerabilities, compilation of reports, management of Continuous Penetration Testing (CPT) vulnerabilities, threat modeling (Threat Modelling). Operation/monitoring of information security systems and response to detected IS incidents. Consulting internal clients within the framework of projects with system security issues. Participation in projects of automation and improvement of IT processes. Requirements: Experience in IT security, IT threat testing. Excellent knowledge of Web Application Security, OWASP Top 10 vulnerabilities. Knowledge and experience with SAST scanners (SonarQube, Netsparker, Fortify, Rapid) and DAST scanners (Acunetix, Qualys, OWASP Zap, BurpSuite, nmap). Experience working with databases and Windows, Linux, macOS operating systems. Understanding of visualization technologies (Hyper-V, VMware, VirtualBox). Experience with cloud platforms (preferably Azure).Experience writing scripts/queries (knowledge of at least one of the following programming languages ​​such as Python, Ruby, Java, php is welcome). Knowledge of industry standards (ISO 27k, GDPR, NIST). Completion of courses / possession of cybersecurity certifications will be an advantage (OSCP, CEH, CPTE, eWPTX, SANS). We offer: Interesting projects and opportunities for personal, professional and career development growth. Official employment and all social guarantees of a responsible employer. Medical insurance after the trial period (VT — 3 months). Hybrid work schedule.